Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa
File: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (raw, json)
Hash identifier: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=
Subject key identifier: 80:16:02:5B:3A:39:8D:3F:CE:E8:14:E4:4A:0D:64:CA:F3:EC:17:0E
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 01942444FD9FBA907B95DEC56FD730153596
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57395
IP address blocks: 185.255.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fd:9f:ba:90:7b:95:de:c5:6f:d7:30:15:35:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8016025b3a398d3fcee814e44a0d64caf3ec170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:44:f5:be:08:2a:3d:e3:f1:ca:53:89:a3:
9f:15:70:11:c6:dd:b4:28:b2:b9:d5:09:6f:46:6d:
70:5d:72:05:8b:79:44:fe:36:82:23:1a:89:d8:da:
5c:69:97:4f:50:1c:1a:a1:f5:30:53:2c:14:24:14:
c6:de:83:0f:7f:7c:ab:c6:2b:91:1e:72:a8:87:76:
eb:65:54:a2:74:f3:2f:38:0c:93:d5:6c:c4:2f:77:
76:9e:e4:87:3f:4a:e7:40:67:52:7c:e4:b0:0a:24:
f3:85:e3:40:48:37:ef:09:98:89:b0:d3:5c:6b:4e:
cc:3b:72:c6:de:ac:f8:cb:c3:a5:ab:0a:d9:a9:0a:
a8:bc:a1:ea:24:91:b9:4f:09:8a:a6:f2:ee:32:03:
33:58:79:6a:4e:b0:eb:4f:ae:10:44:2d:5a:b5:b9:
90:31:70:db:a8:5a:f5:65:f1:5c:6b:54:91:1c:00:
14:7f:1c:cb:58:fa:85:c8:a7:b4:fe:59:fa:76:30:
65:66:0a:d9:ab:d9:30:b7:36:4b:ed:83:fc:e0:32:
b0:19:52:e7:19:24:6e:4c:f1:8f:44:3e:f7:ae:3a:
b6:ec:45:b2:70:b0:b9:d1:bb:d2:43:d8:41:43:29:
e2:43:64:c7:f9:84:f5:39:4d:45:43:e1:65:b5:47:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:02:5B:3A:39:8D:3F:CE:E8:14:E4:4A:0D:64:CA:F3:EC:17:0E
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d1:de:ee:27:c4:d7:b2:23:10:1a:bb:98:78:d5:30:a0:49:
e9:f6:92:6c:d3:9c:7c:b7:83:0a:6e:b3:aa:64:2f:95:64:c5:
f6:0b:f4:fd:21:6d:17:a9:a1:6d:c1:5d:f8:8d:45:ab:f5:96:
9e:d6:0d:97:c7:08:33:25:2e:5a:78:50:53:e0:0f:d8:34:65:
27:85:2f:91:7d:36:2b:fb:3a:6c:79:72:b8:59:21:43:bb:81:
ab:3b:67:af:30:70:d4:e5:5e:7e:b0:9a:9f:3b:50:ba:06:85:
8e:fa:c1:5c:73:75:59:5c:24:41:cf:36:f5:04:82:d7:7c:c3:
13:e4:35:8e:dd:59:83:b6:45:78:01:21:f9:29:7c:24:f1:b5:
81:a7:88:f8:41:42:ff:64:57:69:9e:0b:99:d0:43:60:66:88:
3c:6a:eb:7d:b7:5e:40:60:b5:f1:c2:db:38:4f:9c:f3:9f:66:
20:fa:18:bf:ac:ed:2d:dc:32:e8:9b:ac:83:67:8b:15:8b:54:
65:78:77:f6:7a:fa:dd:d8:27:b6:38:ec:e3:ef:2c:0e:9d:30:
cb:16:80:58:88:b8:c9:57:11:fc:2c:f4:96:36:84:ae:65:00:
cc:5a:70:de:a1:6c:05:d5:14:b9:51:36:3f:b4:cc:2e:d8:85:
71:6e:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:48 2025 by rpki-client